Product:
Cisco Catalyst SD-WAN Manager
Summary
A vulnerability in the Data Collection Agent feature of Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by accessing the filesystem as a low-privileged user and reading the file that contains the DCA password.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-20128 |
Exploitation
To exploit this vulnerability, an attacker must have valid vmanage credentials on the affected system. By accessing the filesystem as a low-privileged user, the attacker can read the credential file containing the DCA password. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges.
Affected Products
- Cisco Catalyst SD-WAN Manager: Vulnerable versions prior to 20.18 allow local authenticated attackers to gain DCA user privileges.
Mitigation
To mitigate this vulnerability, ensure that you are using Cisco Catalyst SD-WAN Manager version 20.18 or later, as these releases are not affected. Additionally, restrict access to the filesystem and implement strong credential management practices to prevent unauthorized access.